medium4.3
CVE-2022-0746
Logic error in dolibarr/dolibarr
Impact
In dolibarr/dolibarr prior to 16.0 any low privileged users could update their login name which should only be updated by admin.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | dolibarr/dolibarr | < 16.0 | 16.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dolibarr | Dolibarr Erp\/Crm | before 16.0.0 |